CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In CoreWCF version 1.9.0, SPNEGO SecurityContextToken negotiation can expose the proof key recovered from the RSTR when TransportWithMessageCredential with Windows client credentials and session establishment are used. This allows an observer to impersonate the authenticated Windows principal and decrypt or forge WS-SecureConversation traffic.
A vulnerability in CoreWCF before versions 1.8.1 and 1.9.1 allows an attacker to replay a captured signed SOAP envelope to execute arbitrary service operations as the victim. The issue stems from missing verification that the ds:Signature covers the expected Security header target.
A vulnerability in CoreWCF before versions 1.8.1 and 1.9.1 allows bypassing SubjectConfirmation method URI and holder-of-key proof key validation in SAML tokens. An attacker can exploit this to downgrade holder-of-key or use custom confirmation method assertions to authenticate without proving authority over the assertion.
A vulnerability in the CoreWCF library allows SAML signature verification to be skipped when a non-X.509 signing token is used. An attacker can reference a non-X.509 SecurityToken key identifier and bypass assertion signature verification.
A vulnerability in CoreWCF before versions 1.8.1 and 1.9.1 allows an unauthenticated remote attacker to trigger premature EOF handling in the framing handshake for NetTcpBinding, NetNamedPipeBinding, or UnixDomainSocketBinding endpoints. This pins one server thread-pool worker at full CPU per connection.
A vulnerability in the Stanza NLP library allows arbitrary code execution via a malicious .pt model file. The model loading mechanism first attempts safe torch.load with weights_only=True, but falls back to unsafe weights_only=False on an attacker-controlled pickle.UnpicklingError, enabling arbitrary code execution when the model is loaded.
A Use-After-Free vulnerability in the InterestGroups component of Google Chrome prior to version 150.0.7871.115 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The issue is rated as High severity by the Chromium security team.
An uninitialized use vulnerability in V8 in Google Chrome prior to 150.0.7871.115 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
A use-after-free vulnerability in the Views component of Google Chrome prior to version 150.0.7871.115 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
A use-after-free vulnerability in Forms in Google Chrome prior to 150.0.7871.115 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The issue is rated as high severity.
An inappropriate implementation in DOM in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. The vulnerability has a high severity rating according to Chromium classification.
Insufficient validation of untrusted input in Codecs in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
A Use-After-Free vulnerability in the WebRTC component of Google Chrome prior to version 150.0.7871.115 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The issue is rated as High severity by the Chromium security team.
A use-after-free vulnerability in the Core component of Google Chrome on Windows prior to version 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
A race condition in GetUserMedia in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
A Use-After-Free vulnerability in the Input component of Google Chrome prior to version 150.0.7871.115 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
A use-after-free vulnerability was found in the Payments component of Google Chrome prior to version 150.0.7871.115. A remote attacker who convinced a user to perform specific UI gestures could potentially exploit heap corruption via a crafted HTML page.
A use-after-free vulnerability in the Actor component of Google Chrome prior to 150.0.7871.115 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
An out-of-bounds read and write vulnerability in Codecs in Google Chrome prior to 150.0.7871.115 allows a remote attacker to potentially exploit heap corruption via a crafted video file. The issue is rated as High severity by Chromium.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS